Connecticut Gov. Ned Lamont speaks about the state’s efforts to get more people vaccinated at Hartford HealthCare St. Vincent’s Medical Center in Bridgeport, Connecticut on February 26, 2021 (Joseph Prezioso / AFP / Getty Images)
Companies that suffer data breaches can avoid punitive damages if they're following an established cybersecurity framework, like those from NIST or CIS.